Sql injection

2021-04-1418:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input field of the SQL explain, analyze, or select form.

CPENameOperatorVersion
django_debug_toolbarge3.0.0
django_debug_toolbarlt3.2.1
django_debug_toolbarge2.0.0
django_debug_toolbarlt2.2.1
django_debug_toolbarge0.10.0
django_debug_toolbarlt1.11.1

Name	Operator	Version
django_debug_toolbar	ge	3.0.0
django_debug_toolbar	lt	3.2.1
django_debug_toolbar	ge	2.0.0
django_debug_toolbar	lt	2.2.1
django_debug_toolbar	ge	0.10.0
django_debug_toolbar	lt	1.11.1